This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j_4e-cHrRW8pa1vPdno6QNA6COA.roa File: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (raw, json) Hash identifier: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY= Subject key identifier: 8F:FE:1E:F9:C1:EB:45:6F:29:6B:5B:CF:76:7A:3A:40:D0:3A:08:E0 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F839545728FE483FCA26022FC6CCB6A Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j_4e-cHrRW8pa1vPdno6QNA6COA.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35145 IP address blocks: 5.181.226.0/23 maxlen: 23 5.181.226.0/24 maxlen: 24 5.181.227.0/24 maxlen: 24 2a0e:802:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:95:45:72:8f:e4:83:fc:a2:60:22:fc:6c:cb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ffe1ef9c1eb456f296b5bcf767a3a40d03a08e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:15:6b:32:4d:38:eb:0c:d8:2b:26:a9:55: 82:28:5d:42:78:7b:ad:c5:9b:a8:62:44:75:ff:73: 77:fb:37:ca:d6:27:b9:df:8f:4b:d9:2b:71:8d:92: 8f:21:75:21:5c:df:cc:91:4d:a9:bd:ef:54:12:78: e8:30:72:59:d3:79:92:ee:91:df:cd:de:2b:46:fb: e1:33:d0:82:fd:5b:d4:88:7a:30:ac:f4:4b:0b:84: 7c:6b:c9:8a:96:df:df:72:34:9d:18:71:37:78:b7: 09:3b:aa:73:28:3c:39:3d:15:eb:f8:94:dd:0d:54: 11:99:45:2a:3f:d7:56:bf:eb:bc:38:ae:b8:a1:b9: f4:11:f7:d7:d0:37:15:82:f9:80:25:a1:f6:95:d5: 5b:fe:13:bf:c8:0e:3b:af:4c:3a:24:08:79:54:d5: dc:da:3a:40:64:37:78:c2:87:90:bf:b9:0d:5e:e0: 5c:11:f9:80:04:ef:83:8c:5f:1e:55:0b:74:d8:74: 8f:b1:fa:d9:6e:80:9a:70:a0:41:7c:dc:6a:fb:1c: 3a:5c:dc:ef:26:0d:15:dc:46:fa:c4:41:20:77:4d: 85:c8:d2:b7:52:b5:58:43:d7:6c:06:69:2c:f2:b8: f7:31:8e:40:85:90:29:c9:96:38:a0:a5:65:a3:ea: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:1E:F9:C1:EB:45:6F:29:6B:5B:CF:76:7A:3A:40:D0:3A:08:E0 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j_4e-cHrRW8pa1vPdno6QNA6COA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.226.0/23 IPv6: 2a0e:802:1::/48 Signature Algorithm: sha256WithRSAEncryption a1:56:11:55:e4:97:cf:b5:80:73:1b:78:30:89:24:4e:55:77: 43:18:3c:fe:89:5b:01:15:f9:40:da:e4:39:f9:b9:c7:54:03: 3e:56:a5:83:62:19:51:de:43:e9:a1:34:bc:76:2e:a0:e4:f7: 93:6c:0c:07:f7:6e:b2:38:04:ae:f9:09:a7:7f:5d:2c:06:fd: 44:99:7b:02:eb:5a:ea:66:fe:31:ef:77:6a:ef:bb:95:59:19: fd:f0:09:95:1a:9e:31:99:59:0b:0f:ba:b6:f2:07:f5:fa:78: f1:8b:3c:51:74:70:e3:6b:b0:8c:32:81:9a:91:10:73:80:f0: a8:79:54:1c:32:c4:9d:51:83:9e:c7:a8:7c:fb:42:3a:08:22: 6e:bc:97:db:db:fa:cb:35:8e:77:7d:ec:1b:6e:0f:52:a2:f2: 44:fe:b5:54:b7:ab:0f:f2:53:c0:6c:79:d5:39:a2:43:7b:0c: 9a:7b:92:cf:93:1d:7f:46:ca:5c:61:61:34:9d:e0:6b:a9:83: eb:f3:3e:e5:74:b6:ee:a9:fe:59:09:b7:a6:99:dd:24:c4:7e: 71:5d:8f:6c:bc:eb:1f:57:db:c8:38:64:6b:74:eb:de:ad:e3: 04:5b:bd:1f:ec:d4:3f:10:a2:f2:25:69:5e:c7:4a:3e:39:6e: 9b:91:d3:a3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g5VFco/kg/yiYCL8bMtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmZlMWVmOWMxZWI0NTZmMjk2YjViY2Y3NjdhM2E0MGQwM2EwOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sUVazJNOOsM2CsmqVWCKF1CeHut xZuoYkR1/3N3+zfK1ie5349L2StxjZKPIXUhXN/MkU2pve9UEnjoMHJZ03mS7pHf zd4rRvvhM9CC/VvUiHowrPRLC4R8a8mKlt/fcjSdGHE3eLcJO6pzKDw5PRXr+JTd DVQRmUUqP9dWv+u8OK64obn0EffX0DcVgvmAJaH2ldVb/hO/yA47r0w6JAh5VNXc 2jpAZDd4woeQv7kNXuBcEfmABO+DjF8eVQt02HSPsfrZboCacKBBfNxq+xw6XNzv Jg0V3Eb6xEEgd02FyNK3UrVYQ9dsBmks8rj3MY5AhZApyZY4oKVlo+pT7wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFI/+HvnB60VvKWtbz3Z6OkDQOgjgMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEval80ZS1jSHJSVzhwYTF2UGRubzZRTkE2Q09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBBbXiMA8E AgACMAkDBwAqDggCAAEwDQYJKoZIhvcNAQELBQADggEBAKFWEVXkl8+1gHMbeDCJ JE5Vd0MYPP6JWwEV+UDa5Dn5ucdUAz5WpYNiGVHeQ+mhNLx2LqDk95NsDAf3brI4 BK75Cad/XSwG/USZewLrWupm/jHvd2rvu5VZGf3wCZUanjGZWQsPurbyB/X6ePGL PFF0cONrsIwygZqREHOA8Kh5VBwyxJ1Rg57HqHz7QjoIIm68l9vb+ss1jnd97Btu D1Ki8kT+tVS3qw/yU8BsedU5okN7DJp7ks+THX9GylxhYTSd4Gupg+vzPuV0tu6p /lkJt6aZ3STEfnFdj2y86x9X28g4ZGt0696t4wRbvR/s1D8QovIlaV7HSj45bpuR 06M= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:14 2026 by rpki-client